EUVD-2022-1154

Malicious code in bioql PyPI...

EUVD-2022-6214

Malicious code in bioql PyPI...

EUVD-2023-0446

Malicious code in bioql PyPI...

EUVD-2023-0723

Malicious code in bioql PyPI...

EUVD-2023-1154

Malicious code in bioql PyPI...

EUVD-2025-0118

Malicious code in bioql PyPI...

EUVD-2024-1716

Malicious code in bioql PyPI...

EUVD-2024-0427

Malicious code in bioql PyPI...

EUVD-2023-1380

Malicious code in bioql PyPI...

MAL-2025-47663 Malicious code in example-fastify-web (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in example-fastify-web (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47378 Malicious code in @art-ws/fastify-http-server (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c40306cbe87fac1be79013ed5a824913519c2637c04ba13ca111504708d8264 Any computer that has this package installed or running should be considered fully compromised. All...

@art-ws/fastify-http-server (>=2.0.1 <=2.0.23), @art-ws/openapi (>=0.1.1 <=0.1.8) potentially affected by unknown CVE via @art-ws/di (>=2.0.1 <=2.0.27)

@art-ws/di NPM version =2.0.1, =2.0.1, =0.1.1, =0.1.8 Source cves: unknown CVE Source advisory: SNYK:JS-ARTWSDI-12744471...

@art-ws/openapi (>=0.1.1 <=0.1.8) potentially affected by unknown CVE via @art-ws/fastify-http-server (>=2.0.15 <=2.0.23)

@art-ws/fastify-http-server NPM version =2.0.15, =0.1.1, =0.1.8 Source cves: unknown CVE Source advisory: SNYK:JS-ARTWSFASTIFYHTTPSERVER-12744474...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Malicious code in example-fastify-api (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41382 Malicious code in example-fastify-api (npm)

The package communicates with a domain associated with malicious activity...

Security Bulletin: Vulnerabilities in Fastify affects IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Potential vulnerability in Fastify has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-32442 DESCRIPTION: Fastify ...

CVE-2024-22207

fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of @fastify/swagger-ui without baseDir set will lead to all files in the module's directory being exposed via http routes served by the module. The vulnerability is fixed in v2.1.0. Setting th...

CVE-2023-25576

@fastify/multipart is a Fastify plugin to parse the multipart content-type. Prior to versions 7.4.1 and 6.0.1, @fastify/multipart may experience denial of service due to a number of situations in which an unlimited number of parts are accepted. This includes the multipart body parser accepting an...